Scene developer @SimonMKWii is back with handy-dandy utility for the Nintendo Switch, that will soon prove to be very useful for all!

Want your cert to access Nintendo's CDN, but you're not on 3.0.0 anymore so you can't run the PegaSwitch script? Don't worry, I've got you covered! Included in the pack is everything you need to generate a pfx certificate file from a NAND dump!

Usage:

First, make sure Python3 and both the asn1 and pycrypto modules are installed.

Next, copy your PRODINFO.bin partition into the folder

Now, add the required keydata into "00_generate_ssl_kek.py", then run it; this will output the ssl_kek.

Add the generated ssl_kek into "01_decrypt_privk_extract_cert.py", then run it, that will decrypt your private key and extract your cert.

Then, run "02_convert_to_der.py", which will convert the extracted files into DER.

Lastly, run "03_save_as_pfx.bat" to save it as an installable PFX certificate!

Voila! You can now find your generated certificate in the new folder named "Out"!

How 2 get dem keyz???

The first key is generated by XORing the AES_KEK (kek_mask 0) with the CryptoUsecase_RsaPrivate seed (kek_seed 1).

The second key is the original master key, you can extract it from your keyblobs using hactool.

The third and fourth keys are plaintext in the ssl sysmodule NSO.

Or alternatively, you can skip this entire step by finding the ssl_kek online, not giving links for obvious reasons... (Trust me, it's out there!)

Massive thanks to @SocraticBliss for helping me out with the python stuff and @SciresM for the RSA calcs required in script 02.

Useful Searches

About MaxConsole

Every day since the year 1995, MaxConsole has been bringing you the very latest in Gaming News and what is happening daily with the all the brands like; Nintendo, PlayStation and Xbox, plus recently we have expanded to include the Mobile World and the new era of PC Gaming Rig's, and we also contain a resources for Retro Lovers from days gone-by, with total scene coverage on all the things that matter like FlashCarts, Modding, Homebrew and Emulators.

Quick Navigation

Contact and Info

Please contact us if you have any issues with any of the content that is contained on our website, or if you wish to place ads for your company on our pages, and if you have any problems accessing your account.